Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          +VX+J6OtZWphuRIH61T9MMP/eHKoqI44/OgnqbUlME8=
Subject key identifier:   4E:8B:BB:43:94:1B:80:02:BC:50:7E:D2:B2:EB:86:F1:DC:6F:C4:39
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       019DA3791119394F83049094C5C6583D6756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          0955
Signing time:             Sun 19 Apr 2026 02:01:53 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:53 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:53 +0000
Files and hashes:         1: DD8GlU-b7VspBkcI_iIvr_RGPjM.roa (hash: 1DKJJF4hfxzBvntYwqTBxwoFNy0hvNUjzhgFWAAfUuQ=)
                          2: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: fhgDRoVmp2EMYQ8DR399e60sp8RFzSCEStY6zI2kbWE=)
                          3: KacNY2NRCZHAdOB1lxgrSlTUZlM.roa (hash: qllOkGGUcuSdb7HoAuEKwUiZ9/GJv0Ub2eGz8KFRmtE=)
                          4: OUk4bgGC3OCebo2r3JX7kFSxVtw.roa (hash: 3wGYjxsZ43jN+PMrritKLslUAurQFB46XPi5qVQJ22Y=)
                          5: RjQGNYymIhhTpLXsvAqFCRYlmK0.roa (hash: 7eWaoKsFK+dXrDDvViANKRbdVD7AqyGyUhoJ/7eX31o=)
                          6: TqnPMVDh9HpYev_FIZchp86-qnU.roa (hash: PYVLbHuRs4EcM0BL7ja7AFfgZkv0Ouc4hw35RTYQcM4=)
                          7: bUm9zhBDDheeAjH1Phzh6QeVwx0.roa (hash: nX9HfLwNd8RrklBkKB4N/M+Uec4jgpinRrWvqTbblWw=)
                          8: darhr2jXl3Y2Sj0q2YhpErawJTA.roa (hash: +2YSXVZu56cjmNQqpda6l8hnoAubEs72p1pcn5+Ljy8=)
                          9: hCl-0r0u30gY3X_QTYVrlxuoF0A.roa (hash: 7PsKvjXxiXeu119UcG4oPYszfeXApUMOiVMhsPclDPA=)
                          10: hLNuu_sbAvc6aYBd_nA5cx_gzt8.roa (hash: l0oUAYvx1+pRIjX6Aa7SZOYLA8siUWlxjSjZBHxavhM=)
                          11: jPE8eDy5sBpOJ0xF-JIqu7BD2Ew.roa (hash: 74IQiVstIh3KzJDiJivZ5vXC5OARjoNqNmVIrOMQl9I=)
                          12: jVEF_UAaRYmedHKGuIyseg1gcbY.roa (hash: tjDxlBVUYxs7z18gz8wlAFg0M0h3WVlIHdRrd9k9MOQ=)
                          13: l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa (hash: asETUMWyauH7zadLdSq6MApEL56kP70KwYwJo1bqytM=)
                          14: pM5HyRJ0tXqa3u3HJO4MenSMSKA.roa (hash: eDbwn0mnmgvF86dDy5bv6IYDjmTGECKb7lV458qQ5XM=)
                          15: sKa8KGSQMDeu4xjp-76scAkNmoM.roa (hash: BDhEXOrhFxU6yRZ6pUCYht36ar+0175olhnKUrOoWm8=)
                          16: tRowsns90J8SVu4Vuk4KwWdxtlI.roa (hash: 8fa16LnJWtPW8DQIUED5RuRMWErqx7miQXyVpxamI30=)
                          17: thQeBvJ49lds_EA91PLLCSwLWIw.roa (hash: kGYpWoGUWthYejf7i/yF1EVl5j1QxZxFpEKnwmEBGZE=)
                          18: tqLA3niYgXo7rtb9KpiVm9YQRsI.roa (hash: JApSiGrHRmdCS2s34nRBKnv5Jb7erd5zPvaQUBbAO4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:79:11:19:39:4f:83:04:90:94:c5:c6:58:3d:67:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Apr 19 02:01:53 2026 GMT
            Not After : Apr 20 02:01:53 2026 GMT
        Subject: CN=4e8bbb43941b8002bc507ed2b2eb86f1dc6fc439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:0f:11:18:da:05:8c:a9:f3:39:00:5d:2f:
                    05:87:c5:e3:e4:1d:29:29:5b:5f:76:74:da:3e:6d:
                    bc:35:01:21:32:97:c3:56:23:80:eb:f2:69:97:4b:
                    5a:01:a0:78:22:4b:3f:3e:4a:44:78:c8:c9:4a:d9:
                    4d:8c:11:c5:a0:ff:8e:18:f0:02:ff:62:06:7d:f1:
                    2e:6d:42:74:61:ec:1e:61:c8:4f:ac:7c:68:37:e8:
                    d0:f2:58:52:3a:4e:f6:b3:a0:d3:2e:57:98:13:e2:
                    7d:3c:6d:60:15:8e:a1:d9:06:9a:3f:b2:ff:3c:83:
                    9b:78:0e:c1:f7:8b:30:a5:b7:72:7b:f8:9a:30:ab:
                    56:63:50:9f:ab:da:44:cd:84:da:93:97:e7:e5:65:
                    60:54:00:f6:39:03:3f:e8:b7:b0:8c:f0:bc:29:88:
                    40:5b:cc:20:34:00:bc:0d:9a:0f:25:05:eb:3c:d9:
                    55:ee:f8:e1:4c:f3:97:f7:1c:22:4b:c4:b3:c8:67:
                    fc:fe:ae:84:c2:fc:16:0b:a3:ca:0c:87:71:1d:18:
                    65:00:90:8b:6d:0d:9e:59:8f:4f:89:aa:61:85:8b:
                    9e:e3:64:f5:9a:96:c5:51:6a:28:4d:1e:c2:2d:01:
                    71:d1:cd:fc:86:14:12:58:75:ae:09:03:e1:ed:a1:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8B:BB:43:94:1B:80:02:BC:50:7E:D2:B2:EB:86:F1:DC:6F:C4:39
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:8d:e7:c0:dc:19:21:10:e7:7b:0c:4e:02:1d:56:41:15:f9:
         00:10:99:81:e4:c0:ff:9a:88:7d:2b:c3:b0:eb:6a:ce:df:0d:
         5f:b5:72:64:96:60:77:04:91:03:5d:31:82:8f:79:dd:21:4d:
         a1:5f:56:bc:e3:ca:99:1f:7b:93:43:bb:93:40:2d:49:f6:d1:
         ba:65:39:38:85:1d:bf:30:17:1e:6f:82:39:f1:3a:bb:3a:16:
         2d:79:19:e8:9a:1d:1d:29:eb:bd:25:a2:e8:5f:62:08:ac:58:
         d3:9c:c8:e1:85:53:6a:2e:a2:93:dc:df:57:86:37:87:c8:50:
         8a:db:05:31:97:d1:e7:04:ec:7b:c2:27:9b:7b:a4:28:26:07:
         d4:37:3d:39:2d:33:b5:b2:7e:e9:64:4e:ce:c3:c4:f7:86:59:
         1c:9f:7f:6b:36:9f:74:ff:9a:a9:e9:2e:4a:bf:87:b5:62:67:
         14:37:8e:03:0f:99:47:ed:fe:c2:bb:1c:93:bd:ef:f5:96:56:
         97:83:cd:e9:7c:35:0d:88:fa:58:e1:80:58:bc:25:78:fc:8e:
         55:6e:68:3c:1e:e7:13:81:84:db:7b:80:02:d8:7f:a6:7a:4f:
         19:92:b6:cf:55:a0:40:27:40:cf:1c:9d:75:2e:0d:29:46:11:
         24:a5:21:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeREZOU+DBJCUxcZYPWdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjYwNDE5MDIwMTUzWhcNMjYwNDIwMDIwMTUzWjAzMTEwLwYDVQQD
Eyg0ZThiYmI0Mzk0MWI4MDAyYmM1MDdlZDJiMmViODZmMWRjNmZjNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNMPERjaBYyp8zkAXS8Fh8Xj5B0p
KVtfdnTaPm28NQEhMpfDViOA6/Jpl0taAaB4Iks/PkpEeMjJStlNjBHFoP+OGPAC
/2IGffEubUJ0YeweYchPrHxoN+jQ8lhSOk72s6DTLleYE+J9PG1gFY6h2QaaP7L/
PIObeA7B94swpbdye/iaMKtWY1Cfq9pEzYTak5fn5WVgVAD2OQM/6LewjPC8KYhA
W8wgNAC8DZoPJQXrPNlV7vjhTPOX9xwiS8SzyGf8/q6EwvwWC6PKDIdxHRhlAJCL
bQ2eWY9PiaphhYue42T1mpbFUWooTR7CLQFx0c38hhQSWHWuCQPh7aHhzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6Lu0OUG4ACvFB+0rLrhvHcb8Q5MB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxY3nwNwZ
IRDnewxOAh1WQRX5ABCZgeTA/5qIfSvDsOtqzt8NX7VyZJZgdwSRA10xgo953SFN
oV9WvOPKmR97k0O7k0AtSfbRumU5OIUdvzAXHm+COfE6uzoWLXkZ6JodHSnrvSWi
6F9iCKxY05zI4YVTai6ik9zfV4Y3h8hQitsFMZfR5wTse8Inm3ukKCYH1Dc9OS0z
tbJ+6WROzsPE94ZZHJ9/azafdP+aqekuSr+HtWJnFDeOAw+ZR+3+wrsck73v9ZZW
l4PN6Xw1DYj6WOGAWLwlePyOVW5oPB7nE4GE23uAAth/pnpPGZK2z1WgQCdAzxyd
dS4NKUYRJKUhJg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:07 2026 by rpki-client